ObjectPreCallback routine

The ObjectPreCallback routine is called by the operating system when a process or thread handle operation occurs.

Syntax


OB_PREOP_CALLBACK_STATUS ObjectPreCallback(
  _In_ PVOID                         RegistrationContext,
  _In_ POB_PRE_OPERATION_INFORMATION OperationInformation
);

Parameters

RegistrationContext [in]

The context that the driver specifies as the CallBackRegistration->RegistrationContext parameter of the ObRegisterCallbacks routine. The meaning of this value is driver-defined.

OperationInformation [in]

A pointer to an OB_PRE_OPERATION_INFORMATION structure that specifies the parameters of the handle operation.

Return value

ObjectPreCallback returns an OB_PREOP_CALLBACK_STATUS value. Drivers must return OB_PREOP_SUCCESS.

Remarks

Use the ObRegisterCallbacks routine to register an ObjectPreCallback routine, and use the ObUnRegisterCallbacks routine to unregister the routine.

This routine is called at PASSIVE_LEVEL in an arbitrary thread context with normal kernel APCs disabled. Special kernel APCs are not disabled. For more information about APCs, see Types of APCs.

Requirements

Target platform

Version

Available starting with Windows Server 2008.

Header

Wdm.h (include Wdm.h, Ntddk.h, or Ntifs.h)

IRQL

Called at PASSIVE_LEVEL (see Remarks section).

See also

OB_PRE_OPERATION_INFORMATION
ObjectPostCallback
ObRegisterCallbacks
ObUnRegisterCallbacks

 

 

Send comments about this topic to Microsoft

Show: